Skip to content

Start building

Integration · Security and identity

AI agents for Infisical

Manage secrets in Infisical (Cloud or self-hosted): list projects, their environments and folders, list secret names, read a secret, create, update, rename and delete secrets, as a machine identity with Universal Auth.

Actions
8
Read
5
Write
3

Actions

What your agents can do in Infisical

8 actions. Each one is a tool your agents can call and a step your workflows can run.

Read 5

Look things up. Nothing changes.

  • List projects

    Lists the secrets-management projects the identity belongs to, as projects: each with its id (use it as the project ID), name, slug and description.

  • Get a project

    Reads one project: its name, slug and its environments (each name, slug like dev, staging or prod, and id).

  • List folders

    Lists the folders under a path of an environment (the root, /, by default), as folders: each with its name, id and when a secret in it last changed.

  • List secrets

    Lists the secrets at a path of an environment (and below it with recursive), as secrets: each with its secretKey (name), secretPath, version, secretComment, tags and updatedAt.

  • Read a secret

    Reads one secret by name from a path of an environment: secret with its secretValue (references like ${OTHER} expanded), version, secretComment, tags and updatedAt.

Write 3

Create, change or send.

  • Create a secret

    Creates a secret with a name and value at a path of an environment, with an optional comment.

  • Update a secret

    Changes a secret's value, comment or name (new_name) at a path of an environment, as a new version; apps and syncs get the new value on their next read.

  • Delete a secretDeletes data

    Deletes a secret from a path of an environment.

A person can approve first

Any write action can be set to wait for a person's approval before it runs, so an agent asks before it changes anything. Actions that delete data ask first by default.

Connection

How it connects

Connect it once in the console, then give it to the agents and workflows that need it.

Sign-in details

Enter the sign-in details Infisical gives you for its API.

What you enter

  • Client ID
  • Client secret

Settings

  • Infisical address
  • Project ID
  • Environment

Kept safe

  • Credentials are stored encrypted with your organization's own keys.
  • They are opened only by the process that makes the call, at the moment it runs, and never go into a prompt or the browser.
  • Calls go only to the tool's own servers.

How we protect your data

Ideas

Ideas to start with

Starting points made only from the actions above. Mix them with any other tool your agents can use.

  • 01

    Ask about your Infisical data

    Ask a question in plain words. The agent can list projects, get a project or list folders in Infisical, then answers with what it found.

  • 02

    Let an agent update Infisical

    Have the agent create a secret or update a secret in Infisical as part of a larger task. Turn on approval and a person signs off on each change first.

  • 03

    Share what it finds in Slack

    Give one agent Infisical and Slack: it can list projects in Infisical and post a summary to a Slack channel in the same run.

FAQ

Infisical and MyDeepAgents

Can MyDeepAgents connect to Infisical?

Yes. The Infisical connector has 8 actions: 5 read and 3 make changes. Your agents can call them as tools, and your workflows can run them as steps.

How do I connect Infisical?

Enter the sign-in details Infisical gives you for its API. You'll need: Client ID and Client secret. The connection also asks for: Infisical address, Project ID and Environment. Credentials are stored encrypted with your organization's own keys and are opened only at the moment of a call.

Can an agent change data in Infisical without asking?

Only if you let it. Each of the 3 actions that change data can be set to wait for a person's approval before it runs, and the one that deletes data asks first by default.

Can I use Infisical in workflows as well as agents?

Yes. Every Infisical action also works as a step in a workflow, and the same connection serves your agents and your workflows.

Early access

Put Infisical to work

Connect it in a few minutes, give an agent the actions it needs, and decide which changes wait for a person.